CVE-2022-47007 — Missing Release of Memory after Effective Lifetime in Binutils

CWE-401 — Missing Release of Memory after Effective Lifetime CWE-400 — Uncontrolled Resource Consumption10 documents8 sources

Severity

5.5MEDIUMNVD

EPSS

0.0%

top 99.15%

CISA KEV

Not in KEV

Exploit

No known exploits

Affected products

GNU Binutils

Timeline

PublishedAug 22

Latest updateJan 15

Description

An issue was discovered function stab_demangle_v3_arg in stabs.c in Binutils 2.34 thru 2.38, allows attackers to cause a denial of service due to memory leaks.

CVSS vector

CVSS:3.1/AV:L/AC:L/PR:N/UI:R/S:U/C:N/I:N/A:HExploitability: 1.8 | Impact: 3.6

Affected Packages2 packages

▶Debiangnu/binutils< 2.38.50.20220627-1+2

▶NVDgnu/binutils2.34 — 2.38

🔴Vulnerability Details

OSV

binutils vulnerabilities↗2024-01-15

▶

GHSA

GHSA-4j42-3xxc-98qx: An issue was discovered function stab_demangle_v3_arg in stabs↗2023-08-22

▶

OSV

CVE-2022-47007: An issue was discovered function stab_demangle_v3_arg in stabs↗2023-08-22

▶

CVEList

CVE-2022-47007: An issue was discovered function stab_demangle_v3_arg in stabs↗2023-08-22

▶

📋Vendor Advisories

Ubuntu

GNU binutils vulnerabilities↗2024-01-15

▶

Ubuntu

GNU binutils vulnerabilities↗2023-10-04

▶

Microsoft

function stab_demangle_v3_arg in stabs.c in Binutils 2.34 thru 2.38 allows attackers to cause a denial of service due to memory leaks↗2023-08-08

▶

Red Hat

binutils: memory leak in stab_demangle_v3_arg() in stabs.c↗2022-06-16

▶

Debian

CVE-2022-47007: binutils - An issue was discovered function stab_demangle_v3_arg in stabs.c in Binutils 2.3...↗2022

▶